HoB HOBLink, Руководство администратора

Страница: 71 / 83

HOBLink VPN Gateway Configuring XML Parameters for HOBLink VPN Gateway
Security Solutions by HOB 71
6.7 Configuration Parameters for IPsec
(
ipsec
)
The List of IPsec schemes (
ipsec-scheme-list
) contains a list of IPsec
schemes used in the VPN Rules (
vpn\rule-list\rule-entry\ipsec-
scheme
) configuration. For XML every list element is grouped in the node
ipsec-
scheme-entry
..
The schemes by default to IPsec should be selected (
default-ipsec-scheme
).
Parameters XML Name Description
Default IPSec Scheme
default-ipsec-
scheme
This is the default IPsec scheme
needed for L2TP/IPsec
connections establisherd by VPN
clients.
Parameters XML Name Description
Name
name
This is the unique name of the
IPsec scheme
Description
description
This may be edited as desired
Protocol
protocol
This is the type of IPsec protocol
used. The supported protocols are
NONE, ESP, AH, AHESP. The
option NONE can only be specified
if 'compression' is not NONE. The
option AHESP is not supported for
IKEv2
Mode
mode
This is the operation mode used.
The supported modes are
TUNNEL, TRANSPORT. The
value by default is TUNNEL. The
value TRANSPORT is only valid if
'protocol' is ESP
AH integrity
ah-integrity
This is only valid for protocols AH
and AHESP. This is a prioritized
comma-separated list of integrity
methods. The supported methods
are HMAC_SHA1, HMAC_MD5
ESP encryption
esp-encryption
This is only valid for protocols ESP
and AHESP. This is a prioritized
comma-separated list of
encryption methods. The
supported methods are AES128,
AES192, AES256, 3DES,
ARCFOUR, BLOWFISH128,
CAST128, NULL. The methods
ARCFOUR, BLOWFISH128 and
CAST128 are not supported in
IKEv2